Description
upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files.
References
- http://www.raditha.com/blog/archives/000547.html
- 1011960 vdb-entry
- 11547 vdb-entry
- 12993 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=277989
- 11171 vdb-entry
- megaupload-upload(17882) vdb-entry